Fix Expired RCU Passwords that Use Autonomous Database as Repository

You can use these steps to update RCU Schema passwords for Essbase Marketplace Listing Version 19.3.0.3.4 and above on OCI Marketplace deployed with Autonomous Data Warehouse.

Steps to Update the RCU Passwords

SSH to the Essbase compute instance as opc user.
Run sudo su - oracle.

Shut down Essbase:

/u01/config/domains/essbase_domain/esstools/bin/stop.sh

From the directory /u01/config/domains/essbase_domain/bin/,
```
cd /u01/config/domains/essbase_domain/bin/
```
make a copy of setStartupEnv.sh.
```
cp setStartupEnv.sh setStartupEnv_ORG.sh
```
Run the following command:
```
/u01/vmtools/sysman/rotate-schema-credentials.sh
```
This will prompt for the database admin password.

Note:
Make sure that the value for -DODBC_URL remains unchanged (in SERVER_SYSTEM_PROPERTIES setting).
Note:

If the following error is encountered when running rotate-schema-credentials.sh script, install cx_oracle and database_utils module to Essbase VM.

./rotate-schema-credentials.sh

Traceback (most recent call last):

File "/u01/vmtools/sysman/rotate-schema-credentials.py", line 13, in

<module>

import database_utils

File "/u01/vmtools/scripts/database_utils.py", line 16, in <module>

import cx_Oracle

ModuleNotFoundError: No module named 'cx_Oracle'

Usually this package is available as part of python install available on all OCI pods. For some reason, this package is missing. If this error is encountered, the package can be installed as follows:
```
$ pip install cx_oracle
```
If it already installed, the following message is returned:

Defaulting to user installation because normal site-packages is not writeable

Requirement already satisfied: cx_oracle in /usr/local/lib64/python3.6/site-packages (8.2.1)

Start Essbase using:

/u01/config/domains/essbase_domain/esstools/bin/start.sh

To enforce that user password never expires in the future

SSH to the Autonomous Data Warehouse database instance as opc user.
sudo su - oracle

Run the following in SQL Developer / SQLP

To get the list of users

Select * from DBA_USERS where username like 'SCHEMA_PREFIX%'

Note:

The schema prefix can be obtained from the Terraform job log. Look for the rcu_schema_prefix in the Outputs section.

Create a profile with an unlimited life time for password

CREATE PROFILE <<Profile_Name>>
LIMIT FAILED_LOGIN_ATTEMPTS 5
PASSWORD_LIFE_TIME unlimited
PASSWORD_REUSE_TIME 60
PASSWORD_REUSE_MAX 5
PASSWORD_VERIFY_FUNCTION verify_function;

Assign the users to profile with an unlimited life time for password

alter user <<SCHEMA_PREFIX_OPSS>> profile <<Profile_Name>>;
alter user <<SCHEMA_PREFIX_STB>> profile <<Profile_Name>>;
alter user <<SCHEMA_PREFIX_WLS>> profile <<Profile_Name>>;
alter user <<SCHEMA_PREFIX_WLS_RUNTIME>> profile <<Profile_Name>>;
alter user <<SCHEMA_PREFIX_MDS>> profile <<Profile_Name>>;
alter user <<SCHEMA_PREFIX_IAU_APPEND>> profile <<Profile_Name>>;
alter user <<SCHEMA_PREFIX_IAU_VIEWER>> profile <<Profile_Name>>;
alter user <<SCHEMA_PREFIX_IAU>> profile <<Profile_Name>>;
alter user <<SCHEMA_PREFIX_ESSBASE>> profile <<Profile_Name>>;

A restart of Essbase services is required.